Drupal Access Code Brute Force Vulnerability (CVE-2025-10928): Medium Severity
Understanding the Drupal Access Code Brute Force Vulnerability (CVE-2025-10928) A security flaw has been identified in the Access code module for Drupal, a popular…
Ucartz Updates
Security & Release Updates
Vulnerability advisories and release notes for the hosting, server and automation software we run: what changed, who is affected and how to stay safe.
Contact Form 7 Repeatable Fields Stored Cross-Site Scripting Vulnerability (CVE-2024-10180): Medium Severity
The “Contact Form 7 – Repeatable Fields” plugin, a popular extension for WordPress, was recently found to have a security flaw. This vulnerability, known…
Parallax Image Stored Cross-Site Scripting Vulnerability (CVE-2024-9898): Medium Severity
The digital landscape is constantly evolving, and with it, the threats to our online presence. Website owners, especially those using content management systems like…
WP Extended Plugin Reflected Cross-Site Scripting Vulnerability (CVE-2024-9347): Medium Severity
The digital landscape demands constant vigilance, especially for website administrators. A recent discovery has brought to light a Reflected Cross-Site Scripting (XSS) vulnerability in…
Drupal Plausible Tracking Cross-Site Scripting Vulnerability (CVE-2025-10927): Medium Severity
Websites relying on the Plausible tracking module for Drupal have a critical security alert to heed. A recently identified flaw, officially known as Cross-Site…
Drupal JSON Field Cross-Site Scripting Vulnerability (CVE-2025-10926): Medium Severity
We’re diving into a crucial security alert concerning the Drupal content management system. A vulnerability has been found in the JSON Field module, which…
vcita Online Booking & Scheduling Calendar Arbitrary File Upload Vulnerability (CVE-2025-54677): Critical Severity
Understanding the Critical Threat A serious security flaw, identified as an Unrestricted Upload of File with Dangerous Type vulnerability, has been discovered in the…
vcita Online Booking & Scheduling Calendar Cross-site Scripting Vulnerability (CVE-2025-54676): Medium Severity
Understanding the vcita Online Booking & Scheduling Calendar Vulnerability A security flaw has been identified in the vcita Online Booking & Scheduling Calendar plugin…
vcita Online Booking & Scheduling Calendar Broken Access Control Vulnerability (CVE-2025-67559): Medium Severity
The “vcita Online Booking & Scheduling Calendar” plugin, a popular tool for managing appointments on WordPress websites, has been found to have a security…
vcita Online Booking & Scheduling Calendar for WordPress CSRF Vulnerability (CVE-2025-67472): High Severity
Understanding the CSRF Vulnerability in vcita Online Booking & Scheduling Calendar A significant security flaw has been identified in the vcita Online Booking &…
10Web Booster Arbitrary Folder Deletion Vulnerability (CVE-2025-13377): Critical Severity
Overview The 10Web Booster plugin for WordPress, a tool designed to speed up websites, has a serious security flaw. This flaw allows attackers to…
Beaver Builder Missing Authorization Vulnerability (CVE-2025-11726): Medium Severity
Understanding the Beaver Builder Authorization Flaw A security vulnerability has been discovered in the Beaver Builder – WordPress Page Builder plugin, identified as CVE-2025-11726.…
Start Building Today
Ready to Get Started?
VPS, dedicated servers, streaming and managed hosting with 24/7 support from the Ucartz team.